Client Credentials Grant

Machine-to-machine (M2M) authentication for server-side applications (RFC 6749 §4.4). The client authenticates using its own credentials (not user credentials) to access resources it owns or has been granted permission to access. No user interaction required.

Try in Looking Glass
Machine-to-Machine

Sequence Diagram

Click any step for details

ClientAuth ServerAPI1Token Request2Access Token Response3API Request
Request
Response
Redirect
Internal

Step-by-Step Breakdown

1
Token Request
ClientAuthorization Server
2
Access Token Response
Authorization ServerClient
3
API Request
ClientResource Server

Token Inspector

Specs for this flow

Sections of the protocol that normatively define this flow, plus the security considerations that apply to it.

Core specs

· The specifications that define this protocol.

Security & privacy

· Dedicated security and privacy considerations.